Legal equality amongst all participating parties

In the vast majority of digital interactions the individual has all the responsibility but very little, and in some scenarios no power or control. For instance, in a business context employees may have access to data outside their remit, which renders them vulnerable to potential espionage tactics from others or for their own unscrupulous gain. Who therefore is responsible?

The organisation for not controlling the access to data the employee requires to carry out their specific role or the employee for abusing the power they may have over the data they are able to access?

This conundrum is replicated across businesses and governments and is a concern amongst citizens on a daily basis across the globe. It also currently provides a massive loophole for criminal activity to gather in momentum. If the power and control remains within the databases and computers, individuals are devoid of responsibility and therefore in their eyes and the eyes of the law, it is virtually impossible to legally enforce the crime that has been committed.